Skip to content

Commit 4bfa584

Browse files
committed
Update initial_access_azure_o365_with_network_alert.toml
1 parent 9995317 commit 4bfa584

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

rules/cross-platform/initial_access_azure_o365_with_network_alert.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ note = """## Triage and analysis
2626
#### Possible investigation steps
2727
2828
- Investiguate all the alerts associated with the source.ip.
29-
- Verify all network security alert details associated with this source.ip.
29+
- Verify the network security alert details associated with this source.ip.
3030
- Verify all sign-in events associated with this source.ip.
3131
- Consider the source IP address and geolocation for the involved user account.
3232
- Consider the device used to sign in. Is it registered and compliant?

0 commit comments

Comments
 (0)